| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-12734 | Hig | 0.53 | 8.1 | 0.01 | Jul 15, 2021 | DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings. | ||
| CVE-2020-12733 | Hig | 0.49 | 7.5 | 0.01 | Jul 15, 2021 | Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account. | ||
| CVE-2021-32739 | Hig | 0.57 | 8.8 | 0.01 | Jul 15, 2021 | Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API… | ||
| CVE-2020-25736 | Hig | 0.54 | 7.8 | 0.02 | Jul 15, 2021 | Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration. | ||
| CVE-2020-15495 | Hig | 0.51 | 7.8 | 0.00 | Jul 15, 2021 | Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration. | ||
| CVE-2020-12731 | Hig | 0.49 | 7.5 | 0.01 | Jul 15, 2021 | The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read by other applications. | ||
| CVE-2021-34692 | Hig | 0.51 | 7.8 | 0.00 | Jul 15, 2021 | iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges. | ||
| CVE-2021-34691 | Hig | 0.49 | 7.5 | 0.01 | Jul 15, 2021 | iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a valid user session by connecting to an ephemeral port. | ||
| CVE-2020-15496 | Hig | 0.51 | 7.8 | 0.00 | Jul 15, 2021 | Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions. | ||
| CVE-2021-33505 | Hig | 0.51 | 7.8 | 0.00 | Jul 15, 2021 | A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions >= 0.29.1. | ||
| CVE-2021-31999 | Hig | 0.57 | 8.8 | 0.01 | Jul 15, 2021 | A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher… | ||
| CVE-2021-25318 | Hig | 0.57 | 8.8 | 0.01 | Jul 15, 2021 | A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16. | ||
| CVE-2020-36420 | Hig | 0.42 | 7.5 | 0.02 | Jul 15, 2021 | Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer | ||
| CVE-2020-29157 | Hig | 0.51 | 7.8 | 0.00 | Jul 14, 2021 | An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted. | ||
| CVE-2021-34173 | Hig | 0.49 | 7.5 | 0.01 | Jul 14, 2021 | An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover. | ||
| CVE-2021-34529 | Hig | 0.51 | 7.8 | 0.05 | Jul 14, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-34528 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Visual Studio Code Remote Code Execution Vulnerability | ||
| CVE-2021-34525 | Hig | 0.57 | 8.8 | 0.02 | Jul 14, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2021-34522 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Microsoft Defender Remote Code Execution Vulnerability | ||
| CVE-2021-34521 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | Raw Image Extension Remote Code Execution Vulnerability | ||
| CVE-2021-34520 | Hig | 0.53 | 8.1 | 0.04 | Jul 14, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-34518 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-34516 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Win32k Elevation of Privilege Vulnerability | ||
| CVE-2021-34514 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2021-34513 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | ||
| CVE-2021-34512 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | ||
| CVE-2021-34511 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2021-34510 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | ||
| CVE-2021-34508 | Hig | 0.57 | 8.8 | 0.02 | Jul 14, 2021 | Windows Kernel Remote Code Execution Vulnerability | ||
| CVE-2021-34504 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Windows Address Book Remote Code Execution Vulnerability | ||
| CVE-2021-34503 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | ||
| CVE-2021-34501 | Hig | 0.55 | 7.8 | 0.52 | Jul 14, 2021 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2021-34498 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows GDI Elevation of Privilege Vulnerability | ||
| CVE-2021-34494 | Hig | 0.58 | 8.8 | 0.04 | Jul 14, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2021-34492 | Hig | 0.53 | 8.1 | 0.02 | Jul 14, 2021 | Windows Certificate Spoofing Vulnerability | ||
| CVE-2021-34490 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows TCP/IP Driver Denial of Service Vulnerability | ||
| CVE-2021-34489 | Hig | 0.51 | 7.8 | 0.02 | Jul 14, 2021 | DirectWrite Remote Code Execution Vulnerability | ||
| CVE-2021-34488 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Console Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-34479 | Hig | 0.51 | 7.8 | 0.03 | Jul 14, 2021 | Microsoft Visual Studio Spoofing Vulnerability | ||
| CVE-2021-34477 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability | ||
| CVE-2021-34476 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Bowser.sys Denial of Service Vulnerability | ||
| CVE-2021-34474 | Hig | 0.52 | 8.0 | 0.02 | Jul 14, 2021 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability | ||
| CVE-2021-34470 | Hig | 0.52 | 8.0 | 0.04 | Jul 14, 2021 | Microsoft Exchange Server Elevation of Privilege Vulnerability | ||
| CVE-2021-34469 | Hig | 0.54 | 8.2 | 0.04 | Jul 14, 2021 | Microsoft Office Security Feature Bypass Vulnerability | ||
| CVE-2021-34468 | Hig | 0.46 | 7.1 | 0.02 | Jul 14, 2021 | Microsoft SharePoint Server Remote Code Execution Vulnerability | ||
| CVE-2021-33788 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows LSA Denial of Service Vulnerability | ||
| CVE-2021-33786 | Hig | 0.53 | 8.1 | 0.02 | Jul 14, 2021 | Windows LSA Security Feature Bypass Vulnerability | ||
| CVE-2021-33785 | Hig | 0.49 | 7.5 | 0.03 | Jul 14, 2021 | Windows AF_UNIX Socket Provider Denial of Service Vulnerability | ||
| CVE-2021-33784 | Hig | 0.51 | 7.8 | 0.01 | Jul 14, 2021 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-33781 | Hig | 0.53 | 8.1 | 0.02 | Jul 14, 2021 | Azure AD Security Feature Bypass Vulnerability |
- risk 0.53cvss 8.1epss 0.01
DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings.
- risk 0.49cvss 7.5epss 0.01
Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account.
- risk 0.57cvss 8.8epss 0.01
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. From version 2.4.0 through version 2.12.4, a vulnerability exists that may allow privilege escalation for authenticated API…
- risk 0.54cvss 7.8epss 0.02
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration.
- risk 0.51cvss 7.8epss 0.00
Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration.
- risk 0.49cvss 7.5epss 0.01
The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read by other applications.
- risk 0.51cvss 7.8epss 0.00
iDrive RemotePC before 7.6.48 on Windows allows privilege escalation. A local and low-privileged user can force RemotePC to execute an attacker-controlled executable with SYSTEM privileges.
- risk 0.49cvss 7.5epss 0.01
iDrive RemotePC before 4.0.1 on Linux allows denial of service. A remote and unauthenticated attacker can disconnect a valid user session by connecting to an ephemeral port.
- risk 0.51cvss 7.8epss 0.00
Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.
- risk 0.51cvss 7.8epss 0.00
A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions >= 0.29.1.
- risk 0.57cvss 8.8epss 0.01
A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher…
- risk 0.57cvss 8.8epss 0.01
A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16.
- risk 0.42cvss 7.5epss 0.02
Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
- risk 0.51cvss 7.8epss 0.00
An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted.
- risk 0.49cvss 7.5epss 0.01
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover.
- risk 0.51cvss 7.8epss 0.05
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Visual Studio Code Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Defender Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Raw Image Extension Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.04
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Win32k Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Installer Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Kernel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Windows Address Book Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- risk 0.55cvss 7.8epss 0.52
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI Elevation of Privilege Vulnerability
- risk 0.58cvss 8.8epss 0.04
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.02
Windows Certificate Spoofing Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows TCP/IP Driver Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.02
DirectWrite Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Console Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Visual Studio Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.03
Bowser.sys Denial of Service Vulnerability
- risk 0.52cvss 8.0epss 0.02
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
- risk 0.52cvss 8.0epss 0.04
Microsoft Exchange Server Elevation of Privilege Vulnerability
- risk 0.54cvss 8.2epss 0.04
Microsoft Office Security Feature Bypass Vulnerability
- risk 0.46cvss 7.1epss 0.02
Microsoft SharePoint Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows LSA Denial of Service Vulnerability
- risk 0.53cvss 8.1epss 0.02
Windows LSA Security Feature Bypass Vulnerability
- risk 0.49cvss 7.5epss 0.03
Windows AF_UNIX Socket Provider Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- risk 0.53cvss 8.1epss 0.02
Azure AD Security Feature Bypass Vulnerability